BFD over VxLAN on vPC uplinks
Disclosed are systems, methods, and computer-readable storage media for synchronizing the secondary vPC node to the primary vPC node in a BFD protocol over a VxLAN channel with a remote node. In some embodiments of the present technology a primary vPC node can receive a packet from the remote node. The primary vPC node can then determine the packet includes either a MAC address corresponding to the primary vPC node or a secondary vPC node, and at least one inner packet identifier. Additionally, the primary networking switch can identify an access control list (ACL) entry from a set of ACL entries based on the at least one inner packet identifier. Subsequently, based on the ACL entry, the primary vPC node can generate a copy of the packet. After which, the primary vPC node can transmit the packet to the secondary vPC node.
1. A method, comprising:
receiving, by a primary virtual port channel (vPC) node, a packet from a remote node;
generating, by the primary vPC node, a copy of the packet; and
based on a MAC address of the packet and after generating the copy of the packet, transmitting, by the primary vPC node to a secondary vPC node, the packet;
receiving, by the primary vPC node in response to the transmitting, a second packet;
authorizing, by the primary vPC node in response to determining the secondary vPC node generated a copy of the second packet, receipt of the second packet; and
restricting by the primary vPC node in response to determining the secondary vPC node did not generate the copy of the second packet, receipt of the second packet.
2. The method of claim 1 , further comprising:
determining, by the secondary vPC node, the primary vPC node generated the copy of the packet.
3. The method of claim 1 , wherein the primary vPC node and the secondary vPC node include MAC addresses of both the primary vPC node and the secondary vPC node.
4. The method of claim 1 , further comprising:
receiving, by the primary vPC node and from a second remote node, a second packet;
determining, by the primary vPC node, the second packet includes the MAC address corresponding to either the primary vPC node or the secondary vPC node and an inner user datagram protocol (UDP) destination address; and
identifying, by the primary vPC node, an access control list entry (ACL) entry from a set of ACL entries based on the inner UDP destination address, the ACL entry including an instruction to copy the second packet.
5. The method of claim 4 , further comprising:
based on the identified ACL entry, generating, by the primary vPC node, a copy of the second packet; and
based on the determined MAC address of the second packet and after generating the copy of the second packet, transmitting, by the primary vPC node to the secondary vPC node, the packet.
6. The method of claim 1 , further comprising
determining a failover of the primary vPC node; and
transmitting instructions to the node to initialize communications between the node and the secondary vPC node.
7. The method of claim 1 , wherein the packet includes at least one of an inner destination internet protocol (IP) address, an inner user datagram protocol (UDP) destination port address and an inner IP time to live (TTL).
8. A non-transitory computer-readable media containing instructions that, when executed by a primary vPC node, cause the primary vPC node to perform operations comprising:
receiving, by a primary virtual port channel (vPC) node, a packet from a remote node;
generating, by the primary vPC node, a copy of the packet; and
based on a MAC address of the packet and after generating the copy of the packet, transmitting, by the primary vPC node to a secondary vPC node, the packet;
receiving, by the primary vPC node in response to the transmitting, a second packet;
authorizing, by the primary vPC node in response to determining the secondary vPC node generated a copy of the second packet, receipt of the second packet; and
restricting by the primary vPC node in response to determining the secondary vPC node did not generate the copy of the second packet, receipt of the second packet.
9. The media of claim 8 , the operations further comprising:
determining, by the secondary vPC node, the primary vPC node generated the copy of the packet.
10. The media of claim 8 , wherein the primary vPC node and the secondary vPC node include MAC addresses of both the primary vPC node and the secondary vPC node.
11. The media of claim 8 , the operations further comprising:
receiving, by the primary vPC node and from a second remote node, a second packet;
determining, by the primary vPC node, the second packet includes the MAC address corresponding to either the primary vPC node or the secondary vPC node and an inner user datagram protocol (UDP) destination address; and
identifying, by the primary vPC node, an access control list entry (ACL) entry from a set of ACL entries based on the inner UDP destination address, the ACL entry including an instruction to copy the second packet.
12. The media of claim 11 , the operations further comprising:
based on the identified ACL entry, generating, by the primary vPC node, a copy of the second packet; and
based on the determined MAC address of the second packet and after generating the copy of the second packet, transmitting, by the primary vPC node to the secondary vPC node, the packet.
13. The media of claim 8 , the operations further comprising
determining a failover of the primary vPC node; and
transmitting instructions to the node to initialize communications between the node and the secondary vPC node.
14. The media of claim 8 , wherein the packet includes at least one of an inner destination internet protocol (IP) address, an inner user datagram protocol (UDP) destination port address and an inner IP time to live (TTL).
15. A computer system, comprising:
a primary virtual port channel (vPC) node,
a memory comprising instructions which when executed by the primary vPC node cause the computer system to perform operations comprising:
receiving, by a primary virtual port channel (vPC) node, a packet from a remote node;
generating, by the primary vPC node, a copy of the packet; and
based on a MAC address of the packet and after generating the copy of the packet, transmitting, by the primary vPC node to a secondary vPC node, the packet;
receiving, by the primary vPC node in response to the transmitting, a second packet;
authorizing, by the primary vPC node in response to determining the secondary vPC node generated a copy of the second packet, receipt of the second packet; and
restricting by the primary vPC node in response to determining the secondary vPC node did not generate the copy of the second packet, receipt of the second packet.
16. The system of claim 15 , the operations further comprising:
determining, by the secondary vPC node, the primary vPC node generated the copy of the packet.
17. The system of claim 15 , wherein the primary vPC node and the secondary vPC node include MAC addresses of both the primary vPC node and the secondary vPC node.
18. The system of claim 15 , the operations further comprising:
receiving, by the primary vPC node and from a second remote node, a second packet;
determining, by the primary vPC node, the second packet includes the MAC address corresponding to either the primary vPC node or the secondary vPC node and an inner user datagram protocol (UDP) destination address; and
identifying, by the primary vPC node, an access control list entry (ACL) entry from a set of ACL entries based on the inner UDP destination address, the ACL entry including an instruction to copy the second packet.
19. The system of claim 18 , the operations further comprising:
based on the identified ACL entry, generating, by the primary vPC node, a copy of the second packet; and
based on the determined MAC address of the second packet and after generating the copy of the second packet, transmitting, by the primary vPC node to the secondary vPC node, the packet.
20. The system of claim 15 , the operations further comprising
determining a failover of the primary vPC node; and
transmitting instructions to the node to initialize communications between the node and the secondary vPC node.